Filtered by vendor Pretty Url Project Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-2009 1 Pretty Url Project 1 Pretty Url 2024-11-21 4.8 Medium
Plugin does not sanitize and escape the URL field in the Pretty Url WordPress plugin through 1.5.4 settings, which could allow high-privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).